<?xml version="1.0" encoding="ascii"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
          "DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
  <title>esapi.reference.default_intrusion_detector</title>
  <link rel="stylesheet" href="epydoc.css" type="text/css" />
  <script type="text/javascript" src="epydoc.js"></script>
</head>

<body bgcolor="white" text="black" link="blue" vlink="#204080"
      alink="#204080">
<!-- ==================== NAVIGATION BAR ==================== -->
<table class="navbar" border="0" width="100%" cellpadding="0"
       bgcolor="#a0c0ff" cellspacing="0">
  <tr valign="middle">
  <!-- Home link -->
      <th>&nbsp;&nbsp;&nbsp;<a
        href="esapi-module.html">Home</a>&nbsp;&nbsp;&nbsp;</th>

  <!-- Tree link -->
      <th>&nbsp;&nbsp;&nbsp;<a
        href="module-tree.html">Trees</a>&nbsp;&nbsp;&nbsp;</th>

  <!-- Index link -->
      <th>&nbsp;&nbsp;&nbsp;<a
        href="identifier-index.html">Indices</a>&nbsp;&nbsp;&nbsp;</th>

  <!-- Help link -->
      <th>&nbsp;&nbsp;&nbsp;<a
        href="help.html">Help</a>&nbsp;&nbsp;&nbsp;</th>

      <th class="navbar" width="100%"></th>
  </tr>
</table>
<table width="100%" cellpadding="0" cellspacing="0">
  <tr valign="top">
    <td width="100%">
      <span class="breadcrumbs">
        <a href="esapi-module.html">Package&nbsp;esapi</a> ::
        <a href="esapi.reference-module.html">Package&nbsp;reference</a> ::
        Module&nbsp;default_intrusion_detector
      </span>
    </td>
    <td>
      <table cellpadding="0" cellspacing="0">
        <!-- hide/show private -->
        <tr><td align="right"><span class="options">[<a href="javascript:void(0);" class="privatelink"
    onclick="toggle_private();">hide&nbsp;private</a>]</span></td></tr>
        <tr><td align="right"><span class="options"
            >[<a href="frames.html" target="_top">frames</a
            >]&nbsp;|&nbsp;<a href="esapi.reference.default_intrusion_detector-pysrc.html"
            target="_top">no&nbsp;frames</a>]</span></td></tr>
      </table>
    </td>
  </tr>
</table>
<h1 class="epydoc">Source Code for <a href="esapi.reference.default_intrusion_detector-module.html">Module esapi.reference.default_intrusion_detector</a></h1>
<pre class="py-src">
<a name="L1"></a><tt class="py-lineno">  1</tt>  <tt class="py-line"><tt class="py-comment">#!/usr/bin/python</tt> </tt>
<a name="L2"></a><tt class="py-lineno">  2</tt>  <tt class="py-line"><tt class="py-comment"># -*- coding: utf-8 -*-</tt> </tt>
<a name="L3"></a><tt class="py-lineno">  3</tt>  <tt class="py-line"> </tt>
<a name="L4"></a><tt class="py-lineno">  4</tt>  <tt class="py-line"><tt class="py-docstring">"""</tt> </tt>
<a name="L5"></a><tt class="py-lineno">  5</tt>  <tt class="py-line"><tt class="py-docstring">@license: OWASP Enterprise Security API (ESAPI)</tt> </tt>
<a name="L6"></a><tt class="py-lineno">  6</tt>  <tt class="py-line"><tt class="py-docstring">     </tt> </tt>
<a name="L7"></a><tt class="py-lineno">  7</tt>  <tt class="py-line"><tt class="py-docstring">    This file is part of the Open Web Application Security Project (OWASP)</tt> </tt>
<a name="L8"></a><tt class="py-lineno">  8</tt>  <tt class="py-line"><tt class="py-docstring">    Enterprise Security API (ESAPI) project. For details, please see</tt> </tt>
<a name="L9"></a><tt class="py-lineno">  9</tt>  <tt class="py-line"><tt class="py-docstring">    U{http://www.owasp.org/index.php/ESAPI&lt;http://www.owasp.org/index.php/ESAPI&gt;}.</tt> </tt>
<a name="L10"></a><tt class="py-lineno"> 10</tt>  <tt class="py-line"><tt class="py-docstring"></tt> </tt>
<a name="L11"></a><tt class="py-lineno"> 11</tt>  <tt class="py-line"><tt class="py-docstring">    The ESAPI is published by OWASP under the BSD license. You should read and </tt> </tt>
<a name="L12"></a><tt class="py-lineno"> 12</tt>  <tt class="py-line"><tt class="py-docstring">    accept the LICENSE before you use, modify, and/or redistribute this software.</tt> </tt>
<a name="L13"></a><tt class="py-lineno"> 13</tt>  <tt class="py-line"><tt class="py-docstring">    </tt> </tt>
<a name="L14"></a><tt class="py-lineno"> 14</tt>  <tt class="py-line"><tt class="py-docstring">@copyright: Copyright (c) 2009 - The OWASP Foundation</tt> </tt>
<a name="L15"></a><tt class="py-lineno"> 15</tt>  <tt class="py-line"><tt class="py-docstring">@summary: Reference implementation of the IntrusionDetector interface.</tt> </tt>
<a name="L16"></a><tt class="py-lineno"> 16</tt>  <tt class="py-line"><tt class="py-docstring">@author: Craig Younkins (craig.younkins@owasp.org)</tt> </tt>
<a name="L17"></a><tt class="py-lineno"> 17</tt>  <tt class="py-line"><tt class="py-docstring">"""</tt> </tt>
<a name="L18"></a><tt class="py-lineno"> 18</tt>  <tt class="py-line"> </tt>
<a name="L19"></a><tt class="py-lineno"> 19</tt>  <tt class="py-line"><tt class="py-keyword">from</tt> <tt class="py-name">datetime</tt> <tt class="py-keyword">import</tt> <tt class="py-name">datetime</tt><tt class="py-op">,</tt> <tt class="py-name">timedelta</tt> </tt>
<a name="L20"></a><tt class="py-lineno"> 20</tt>  <tt class="py-line"> </tt>
<a name="L21"></a><tt class="py-lineno"> 21</tt>  <tt class="py-line"><tt class="py-keyword">from</tt> <tt id="link-0" class="py-name" targets="Package esapi=esapi-module.html"><a title="esapi" class="py-name" href="#" onclick="return doclink('link-0', 'esapi', 'link-0');">esapi</a></tt><tt class="py-op">.</tt><tt id="link-1" class="py-name" targets="Module esapi.core=esapi.core-module.html"><a title="esapi.core" class="py-name" href="#" onclick="return doclink('link-1', 'core', 'link-1');">core</a></tt> <tt class="py-keyword">import</tt> <tt id="link-2" class="py-name" targets="Class esapi.core.ESAPI=esapi.core.ESAPI-class.html"><a title="esapi.core.ESAPI" class="py-name" href="#" onclick="return doclink('link-2', 'ESAPI', 'link-2');">ESAPI</a></tt> </tt>
<a name="L22"></a><tt class="py-lineno"> 22</tt>  <tt class="py-line"><tt class="py-keyword">from</tt> <tt id="link-3" class="py-name"><a title="esapi" class="py-name" href="#" onclick="return doclink('link-3', 'esapi', 'link-0');">esapi</a></tt><tt class="py-op">.</tt><tt id="link-4" class="py-name" targets="Module esapi.translation=esapi.translation-module.html"><a title="esapi.translation" class="py-name" href="#" onclick="return doclink('link-4', 'translation', 'link-4');">translation</a></tt> <tt class="py-keyword">import</tt> <tt class="py-name">_</tt> </tt>
<a name="L23"></a><tt class="py-lineno"> 23</tt>  <tt class="py-line"><tt class="py-keyword">from</tt> <tt id="link-5" class="py-name"><a title="esapi" class="py-name" href="#" onclick="return doclink('link-5', 'esapi', 'link-0');">esapi</a></tt><tt class="py-op">.</tt><tt id="link-6" class="py-name" targets="Class Method esapi.core.ESAPI.intrusion_detector()=esapi.core.ESAPI-class.html#intrusion_detector,Module esapi.intrusion_detector=esapi.intrusion_detector-module.html"><a title="esapi.core.ESAPI.intrusion_detector
esapi.intrusion_detector" class="py-name" href="#" onclick="return doclink('link-6', 'intrusion_detector', 'link-6');">intrusion_detector</a></tt> <tt class="py-keyword">import</tt> <tt id="link-7" class="py-name" targets="Class esapi.intrusion_detector.IntrusionDetector=esapi.intrusion_detector.IntrusionDetector-class.html"><a title="esapi.intrusion_detector.IntrusionDetector" class="py-name" href="#" onclick="return doclink('link-7', 'IntrusionDetector', 'link-7');">IntrusionDetector</a></tt> </tt>
<a name="L24"></a><tt class="py-lineno"> 24</tt>  <tt class="py-line"><tt class="py-keyword">from</tt> <tt id="link-8" class="py-name"><a title="esapi" class="py-name" href="#" onclick="return doclink('link-8', 'esapi', 'link-0');">esapi</a></tt><tt class="py-op">.</tt><tt id="link-9" class="py-name" targets="Class Method esapi.core.ESAPI.logger()=esapi.core.ESAPI-class.html#logger,Module esapi.logger=esapi.logger-module.html"><a title="esapi.core.ESAPI.logger
esapi.logger" class="py-name" href="#" onclick="return doclink('link-9', 'logger', 'link-9');">logger</a></tt> <tt class="py-keyword">import</tt> <tt id="link-10" class="py-name" targets="Class esapi.logger.Logger=esapi.logger.Logger-class.html"><a title="esapi.logger.Logger" class="py-name" href="#" onclick="return doclink('link-10', 'Logger', 'link-10');">Logger</a></tt> </tt>
<a name="L25"></a><tt class="py-lineno"> 25</tt>  <tt class="py-line"><tt class="py-keyword">from</tt> <tt id="link-11" class="py-name"><a title="esapi" class="py-name" href="#" onclick="return doclink('link-11', 'esapi', 'link-0');">esapi</a></tt><tt class="py-op">.</tt><tt id="link-12" class="py-name" targets="Module esapi.exceptions=esapi.exceptions-module.html"><a title="esapi.exceptions" class="py-name" href="#" onclick="return doclink('link-12', 'exceptions', 'link-12');">exceptions</a></tt> <tt class="py-keyword">import</tt> <tt id="link-13" class="py-name" targets="Class esapi.exceptions.IntrusionException=esapi.exceptions.IntrusionException-class.html"><a title="esapi.exceptions.IntrusionException" class="py-name" href="#" onclick="return doclink('link-13', 'IntrusionException', 'link-13');">IntrusionException</a></tt> </tt>
<a name="L26"></a><tt class="py-lineno"> 26</tt>  <tt class="py-line"> </tt>
<a name="DefaultIntrusionDetector"></a><div id="DefaultIntrusionDetector-def"><a name="L27"></a><tt class="py-lineno"> 27</tt> <a class="py-toggle" href="#" id="DefaultIntrusionDetector-toggle" onclick="return toggle('DefaultIntrusionDetector');">-</a><tt class="py-line"><tt class="py-keyword">class</tt> <a class="py-def-name" href="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector-class.html">DefaultIntrusionDetector</a><tt class="py-op">(</tt><tt class="py-base-class">IntrusionDetector</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
</div><div id="DefaultIntrusionDetector-collapsed" style="display:none;" pad="+++" indent="++++"></div><div id="DefaultIntrusionDetector-expanded"><a name="L28"></a><tt class="py-lineno"> 28</tt>  <tt class="py-line">    <tt class="py-docstring">"""</tt> </tt>
<a name="L29"></a><tt class="py-lineno"> 29</tt>  <tt class="py-line"><tt class="py-docstring">    Reference implementation of the IntrusionDetector interface. This </tt> </tt>
<a name="L30"></a><tt class="py-lineno"> 30</tt>  <tt class="py-line"><tt class="py-docstring">    implementation monitors EnterpriseSecurityExceptions to see if any user</tt> </tt>
<a name="L31"></a><tt class="py-lineno"> 31</tt>  <tt class="py-line"><tt class="py-docstring">    exceeds a configurable threshold in a configurable time period.</tt> </tt>
<a name="L32"></a><tt class="py-lineno"> 32</tt>  <tt class="py-line"><tt class="py-docstring">    For example, it can monitor to see if ...</tt> </tt>
<a name="L33"></a><tt class="py-lineno"> 33</tt>  <tt class="py-line"><tt class="py-docstring">    </tt> </tt>
<a name="L34"></a><tt class="py-lineno"> 34</tt>  <tt class="py-line"><tt class="py-docstring">        - A user exceeds 10 input validation issues in a 1 minute period</tt> </tt>
<a name="L35"></a><tt class="py-lineno"> 35</tt>  <tt class="py-line"><tt class="py-docstring">        - There are more than 3 authentication problems in a 10 second period</tt> </tt>
<a name="L36"></a><tt class="py-lineno"> 36</tt>  <tt class="py-line"><tt class="py-docstring">        - More complex monitorings, such as establishing a baseline of</tt> </tt>
<a name="L37"></a><tt class="py-lineno"> 37</tt>  <tt class="py-line"><tt class="py-docstring">          expected behavior and detecting deviations from the baseline.</tt> </tt>
<a name="L38"></a><tt class="py-lineno"> 38</tt>  <tt class="py-line"><tt class="py-docstring">          </tt> </tt>
<a name="L39"></a><tt class="py-lineno"> 39</tt>  <tt class="py-line"><tt class="py-docstring">    This implementation stores state in the user's session, so that it will be</tt> </tt>
<a name="L40"></a><tt class="py-lineno"> 40</tt>  <tt class="py-line"><tt class="py-docstring">    properly cleaned up when the session is terminated. State is not otherwise</tt> </tt>
<a name="L41"></a><tt class="py-lineno"> 41</tt>  <tt class="py-line"><tt class="py-docstring">    persisted, so attacks that span sessions will not be detectable.</tt> </tt>
<a name="L42"></a><tt class="py-lineno"> 42</tt>  <tt class="py-line"><tt class="py-docstring">    </tt> </tt>
<a name="L43"></a><tt class="py-lineno"> 43</tt>  <tt class="py-line"><tt class="py-docstring">    @author: Craig Younkins (craig.younkins@owasp.org)</tt> </tt>
<a name="L44"></a><tt class="py-lineno"> 44</tt>  <tt class="py-line"><tt class="py-docstring">    """</tt> </tt>
<a name="L45"></a><tt class="py-lineno"> 45</tt>  <tt class="py-line">     </tt>
<a name="DefaultIntrusionDetector.__init__"></a><div id="DefaultIntrusionDetector.__init__-def"><a name="L46"></a><tt class="py-lineno"> 46</tt> <a class="py-toggle" href="#" id="DefaultIntrusionDetector.__init__-toggle" onclick="return toggle('DefaultIntrusionDetector.__init__');">-</a><tt class="py-line">    <tt class="py-keyword">def</tt> <a class="py-def-name" href="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
</div><div id="DefaultIntrusionDetector.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="DefaultIntrusionDetector.__init__-expanded"><a name="L47"></a><tt class="py-lineno"> 47</tt>  <tt class="py-line">        <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-14" class="py-name"><a title="esapi.core.ESAPI.logger
esapi.logger" class="py-name" href="#" onclick="return doclink('link-14', 'logger', 'link-9');">logger</a></tt> <tt class="py-op">=</tt> <tt id="link-15" class="py-name"><a title="esapi.core.ESAPI" class="py-name" href="#" onclick="return doclink('link-15', 'ESAPI', 'link-2');">ESAPI</a></tt><tt class="py-op">.</tt><tt id="link-16" class="py-name"><a title="esapi.core.ESAPI.logger
esapi.logger" class="py-name" href="#" onclick="return doclink('link-16', 'logger', 'link-9');">logger</a></tt><tt class="py-op">(</tt><tt class="py-string">"IntrusionDetector"</tt><tt class="py-op">)</tt> </tt>
</div><a name="L48"></a><tt class="py-lineno"> 48</tt>  <tt class="py-line">     </tt>
<a name="DefaultIntrusionDetector.add_exception"></a><div id="DefaultIntrusionDetector.add_exception-def"><a name="L49"></a><tt class="py-lineno"> 49</tt> <a class="py-toggle" href="#" id="DefaultIntrusionDetector.add_exception-toggle" onclick="return toggle('DefaultIntrusionDetector.add_exception');">-</a><tt class="py-line">    <tt class="py-keyword">def</tt> <a class="py-def-name" href="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector-class.html#add_exception">add_exception</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">exception</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
</div><div id="DefaultIntrusionDetector.add_exception-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="DefaultIntrusionDetector.add_exception-expanded"><a name="L50"></a><tt class="py-lineno"> 50</tt>  <tt class="py-line">        <tt class="py-comment"># Log the exception</tt> </tt>
<a name="L51"></a><tt class="py-lineno"> 51</tt>  <tt class="py-line">        <tt class="py-keyword">if</tt> <tt class="py-name">hasattr</tt><tt class="py-op">(</tt><tt class="py-name">exception</tt><tt class="py-op">,</tt> <tt class="py-string">'get_log_message'</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
<a name="L52"></a><tt class="py-lineno"> 52</tt>  <tt class="py-line">            <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-17" class="py-name"><a title="esapi.core.ESAPI.logger
esapi.logger" class="py-name" href="#" onclick="return doclink('link-17', 'logger', 'link-9');">logger</a></tt><tt class="py-op">.</tt><tt id="link-18" class="py-name" targets="Method esapi.logger.Logger.warning()=esapi.logger.Logger-class.html#warning,Method esapi.reference.python_log_factory.PythonLogFactory.PythonLogger.warning()=esapi.reference.python_log_factory.PythonLogFactory.PythonLogger-class.html#warning"><a title="esapi.logger.Logger.warning
esapi.reference.python_log_factory.PythonLogFactory.PythonLogger.warning" class="py-name" href="#" onclick="return doclink('link-18', 'warning', 'link-18');">warning</a></tt><tt class="py-op">(</tt> <tt id="link-19" class="py-name"><a title="esapi.logger.Logger" class="py-name" href="#" onclick="return doclink('link-19', 'Logger', 'link-10');">Logger</a></tt><tt class="py-op">.</tt><tt id="link-20" class="py-name" targets="Variable esapi.logger.Logger.SECURITY_FAILURE=esapi.logger.Logger-class.html#SECURITY_FAILURE"><a title="esapi.logger.Logger.SECURITY_FAILURE" class="py-name" href="#" onclick="return doclink('link-20', 'SECURITY_FAILURE', 'link-20');">SECURITY_FAILURE</a></tt><tt class="py-op">,</tt> </tt>
<a name="L53"></a><tt class="py-lineno"> 53</tt>  <tt class="py-line">                <tt class="py-name">exception</tt><tt class="py-op">.</tt><tt id="link-21" class="py-name" targets="Method esapi.exceptions.EnterpriseSecurityException.get_log_message()=esapi.exceptions.EnterpriseSecurityException-class.html#get_log_message,Method esapi.exceptions.IntrusionException.get_log_message()=esapi.exceptions.IntrusionException-class.html#get_log_message"><a title="esapi.exceptions.EnterpriseSecurityException.get_log_message
esapi.exceptions.IntrusionException.get_log_message" class="py-name" href="#" onclick="return doclink('link-21', 'get_log_message', 'link-21');">get_log_message</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">,</tt> </tt>
<a name="L54"></a><tt class="py-lineno"> 54</tt>  <tt class="py-line">                <tt class="py-name">exception</tt> <tt class="py-op">)</tt> </tt>
<a name="L55"></a><tt class="py-lineno"> 55</tt>  <tt class="py-line">        <tt class="py-keyword">else</tt><tt class="py-op">:</tt> </tt>
<a name="L56"></a><tt class="py-lineno"> 56</tt>  <tt class="py-line">            <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-22" class="py-name"><a title="esapi.core.ESAPI.logger
esapi.logger" class="py-name" href="#" onclick="return doclink('link-22', 'logger', 'link-9');">logger</a></tt><tt class="py-op">.</tt><tt id="link-23" class="py-name"><a title="esapi.logger.Logger.warning
esapi.reference.python_log_factory.PythonLogFactory.PythonLogger.warning" class="py-name" href="#" onclick="return doclink('link-23', 'warning', 'link-18');">warning</a></tt><tt class="py-op">(</tt> <tt id="link-24" class="py-name"><a title="esapi.logger.Logger" class="py-name" href="#" onclick="return doclink('link-24', 'Logger', 'link-10');">Logger</a></tt><tt class="py-op">.</tt><tt id="link-25" class="py-name"><a title="esapi.logger.Logger.SECURITY_FAILURE" class="py-name" href="#" onclick="return doclink('link-25', 'SECURITY_FAILURE', 'link-20');">SECURITY_FAILURE</a></tt><tt class="py-op">,</tt> </tt>
<a name="L57"></a><tt class="py-lineno"> 57</tt>  <tt class="py-line">                <tt class="py-name">exception</tt><tt class="py-op">.</tt><tt class="py-name">message</tt><tt class="py-op">,</tt> </tt>
<a name="L58"></a><tt class="py-lineno"> 58</tt>  <tt class="py-line">                <tt class="py-name">exception</tt> <tt class="py-op">)</tt> </tt>
<a name="L59"></a><tt class="py-lineno"> 59</tt>  <tt class="py-line">                 </tt>
<a name="L60"></a><tt class="py-lineno"> 60</tt>  <tt class="py-line">        <tt class="py-keyword">if</tt> <tt class="py-name">isinstance</tt><tt class="py-op">(</tt><tt class="py-name">exception</tt><tt class="py-op">,</tt> <tt id="link-26" class="py-name"><a title="esapi.exceptions.IntrusionException" class="py-name" href="#" onclick="return doclink('link-26', 'IntrusionException', 'link-13');">IntrusionException</a></tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
<a name="L61"></a><tt class="py-lineno"> 61</tt>  <tt class="py-line">            <tt class="py-keyword">return</tt> </tt>
<a name="L62"></a><tt class="py-lineno"> 62</tt>  <tt class="py-line">                 </tt>
<a name="L63"></a><tt class="py-lineno"> 63</tt>  <tt class="py-line">        <tt class="py-comment"># Add the exception to the current user, which may trigger a</tt> </tt>
<a name="L64"></a><tt class="py-lineno"> 64</tt>  <tt class="py-line">        <tt class="py-comment"># dector</tt> </tt>
<a name="L65"></a><tt class="py-lineno"> 65</tt>  <tt class="py-line">        <tt id="link-27" class="py-name" targets="Class Method esapi.core.ESAPI.user()=esapi.core.ESAPI-class.html#user,Module esapi.user=esapi.user-module.html"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-27', 'user', 'link-27');">user</a></tt> <tt class="py-op">=</tt> <tt id="link-28" class="py-name"><a title="esapi.core.ESAPI" class="py-name" href="#" onclick="return doclink('link-28', 'ESAPI', 'link-2');">ESAPI</a></tt><tt class="py-op">.</tt><tt id="link-29" class="py-name" targets="Module esapi.authenticator=esapi.authenticator-module.html,Class Method esapi.core.ESAPI.authenticator()=esapi.core.ESAPI-class.html#authenticator"><a title="esapi.authenticator
esapi.core.ESAPI.authenticator" class="py-name" href="#" onclick="return doclink('link-29', 'authenticator', 'link-29');">authenticator</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">.</tt><tt class="py-name">current_user</tt> </tt>
<a name="L66"></a><tt class="py-lineno"> 66</tt>  <tt class="py-line">        <tt class="py-name">event_name</tt> <tt class="py-op">=</tt> <tt class="py-name">exception</tt><tt class="py-op">.</tt><tt class="py-name">__class__</tt><tt class="py-op">.</tt><tt class="py-name">__name__</tt> </tt>
<a name="L67"></a><tt class="py-lineno"> 67</tt>  <tt class="py-line">        <tt class="py-keyword">try</tt><tt class="py-op">:</tt> </tt>
<a name="L68"></a><tt class="py-lineno"> 68</tt>  <tt class="py-line">            <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-30" class="py-name" targets="Method esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.add_security_event()=esapi.reference.default_intrusion_detector.DefaultIntrusionDetector-class.html#add_security_event"><a title="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.add_security_event" class="py-name" href="#" onclick="return doclink('link-30', 'add_security_event', 'link-30');">add_security_event</a></tt><tt class="py-op">(</tt><tt id="link-31" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-31', 'user', 'link-27');">user</a></tt><tt class="py-op">,</tt> <tt class="py-name">event_name</tt><tt class="py-op">)</tt> </tt>
<a name="L69"></a><tt class="py-lineno"> 69</tt>  <tt class="py-line">        <tt class="py-keyword">except</tt> <tt id="link-32" class="py-name"><a title="esapi.exceptions.IntrusionException" class="py-name" href="#" onclick="return doclink('link-32', 'IntrusionException', 'link-13');">IntrusionException</a></tt><tt class="py-op">,</tt> <tt class="py-name">extra</tt><tt class="py-op">:</tt> </tt>
<a name="L70"></a><tt class="py-lineno"> 70</tt>  <tt class="py-line">            <tt class="py-name">quota</tt> <tt class="py-op">=</tt> <tt id="link-33" class="py-name"><a title="esapi.core.ESAPI" class="py-name" href="#" onclick="return doclink('link-33', 'ESAPI', 'link-2');">ESAPI</a></tt><tt class="py-op">.</tt><tt id="link-34" class="py-name" targets="Class Method esapi.core.ESAPI.security_configuration()=esapi.core.ESAPI-class.html#security_configuration,Module esapi.security_configuration=esapi.security_configuration-module.html"><a title="esapi.core.ESAPI.security_configuration
esapi.security_configuration" class="py-name" href="#" onclick="return doclink('link-34', 'security_configuration', 'link-34');">security_configuration</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">.</tt><tt id="link-35" class="py-name" targets="Method esapi.reference.default_security_configuration.DefaultSecurityConfiguration.get_quota()=esapi.reference.default_security_configuration.DefaultSecurityConfiguration-class.html#get_quota,Method esapi.security_configuration.SecurityConfiguration.get_quota()=esapi.security_configuration.SecurityConfiguration-class.html#get_quota"><a title="esapi.reference.default_security_configuration.DefaultSecurityConfiguration.get_quota
esapi.security_configuration.SecurityConfiguration.get_quota" class="py-name" href="#" onclick="return doclink('link-35', 'get_quota', 'link-35');">get_quota</a></tt><tt class="py-op">(</tt><tt class="py-name">event_name</tt><tt class="py-op">)</tt> </tt>
<a name="L71"></a><tt class="py-lineno"> 71</tt>  <tt class="py-line">            <tt class="py-keyword">for</tt> <tt class="py-name">action</tt> <tt class="py-keyword">in</tt> <tt class="py-name">quota</tt><tt class="py-op">.</tt><tt id="link-36" class="py-name" targets="Variable esapi.security_configuration.SecurityConfiguration.Threshold.actions=esapi.security_configuration.SecurityConfiguration.Threshold-class.html#actions"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.actions" class="py-name" href="#" onclick="return doclink('link-36', 'actions', 'link-36');">actions</a></tt><tt class="py-op">:</tt> </tt>
<a name="L72"></a><tt class="py-lineno"> 72</tt>  <tt class="py-line">                <tt class="py-name">message</tt> <tt class="py-op">=</tt> <tt class="py-op">(</tt><tt class="py-name">_</tt><tt class="py-op">(</tt><tt class="py-string">"User exceeded quota of %(count)s per %(interval)s seconds for event %(event_name)s. Taking actions %(actions)s"</tt><tt class="py-op">)</tt> <tt class="py-op">%</tt> </tt>
<a name="L73"></a><tt class="py-lineno"> 73</tt>  <tt class="py-line">                    <tt class="py-op">{</tt><tt class="py-string">'count'</tt> <tt class="py-op">:</tt> <tt class="py-name">quota</tt><tt class="py-op">.</tt><tt id="link-37" class="py-name" targets="Variable esapi.security_configuration.SecurityConfiguration.Threshold.count=esapi.security_configuration.SecurityConfiguration.Threshold-class.html#count,Variable esapi.test.http.mock_session.MockSession.count=esapi.test.http.mock_session.MockSession-class.html#count"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.count
esapi.test.http.mock_session.MockSession.count" class="py-name" href="#" onclick="return doclink('link-37', 'count', 'link-37');">count</a></tt><tt class="py-op">,</tt> </tt>
<a name="L74"></a><tt class="py-lineno"> 74</tt>  <tt class="py-line">                     <tt class="py-string">'interval'</tt> <tt class="py-op">:</tt> <tt class="py-name">quota</tt><tt class="py-op">.</tt><tt id="link-38" class="py-name" targets="Variable esapi.security_configuration.SecurityConfiguration.Threshold.interval=esapi.security_configuration.SecurityConfiguration.Threshold-class.html#interval"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.interval" class="py-name" href="#" onclick="return doclink('link-38', 'interval', 'link-38');">interval</a></tt><tt class="py-op">,</tt> </tt>
<a name="L75"></a><tt class="py-lineno"> 75</tt>  <tt class="py-line">                     <tt class="py-string">'event_name'</tt> <tt class="py-op">:</tt> <tt class="py-name">event_name</tt><tt class="py-op">,</tt> </tt>
<a name="L76"></a><tt class="py-lineno"> 76</tt>  <tt class="py-line">                     <tt class="py-string">'actions'</tt> <tt class="py-op">:</tt> <tt class="py-name">quota</tt><tt class="py-op">.</tt><tt id="link-39" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.actions" class="py-name" href="#" onclick="return doclink('link-39', 'actions', 'link-36');">actions</a></tt><tt class="py-op">,</tt><tt class="py-op">}</tt><tt class="py-op">)</tt> </tt>
<a name="L77"></a><tt class="py-lineno"> 77</tt>  <tt class="py-line">                <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-40" class="py-name" targets="Method esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.take_security_action()=esapi.reference.default_intrusion_detector.DefaultIntrusionDetector-class.html#take_security_action"><a title="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.take_security_action" class="py-name" href="#" onclick="return doclink('link-40', 'take_security_action', 'link-40');">take_security_action</a></tt><tt class="py-op">(</tt><tt class="py-name">action</tt><tt class="py-op">,</tt> <tt class="py-name">message</tt><tt class="py-op">)</tt> </tt>
</div><a name="L78"></a><tt class="py-lineno"> 78</tt>  <tt class="py-line">         </tt>
<a name="DefaultIntrusionDetector.add_event"></a><div id="DefaultIntrusionDetector.add_event-def"><a name="L79"></a><tt class="py-lineno"> 79</tt> <a class="py-toggle" href="#" id="DefaultIntrusionDetector.add_event-toggle" onclick="return toggle('DefaultIntrusionDetector.add_event');">-</a><tt class="py-line">    <tt class="py-keyword">def</tt> <a class="py-def-name" href="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector-class.html#add_event">add_event</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">event_name</tt><tt class="py-op">,</tt> <tt class="py-param">log_message</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
</div><div id="DefaultIntrusionDetector.add_event-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="DefaultIntrusionDetector.add_event-expanded"><a name="L80"></a><tt class="py-lineno"> 80</tt>  <tt class="py-line">        <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-41" class="py-name"><a title="esapi.core.ESAPI.logger
esapi.logger" class="py-name" href="#" onclick="return doclink('link-41', 'logger', 'link-9');">logger</a></tt><tt class="py-op">.</tt><tt id="link-42" class="py-name"><a title="esapi.logger.Logger.warning
esapi.reference.python_log_factory.PythonLogFactory.PythonLogger.warning" class="py-name" href="#" onclick="return doclink('link-42', 'warning', 'link-18');">warning</a></tt><tt class="py-op">(</tt> <tt id="link-43" class="py-name"><a title="esapi.logger.Logger" class="py-name" href="#" onclick="return doclink('link-43', 'Logger', 'link-10');">Logger</a></tt><tt class="py-op">.</tt><tt id="link-44" class="py-name"><a title="esapi.logger.Logger.SECURITY_FAILURE" class="py-name" href="#" onclick="return doclink('link-44', 'SECURITY_FAILURE', 'link-20');">SECURITY_FAILURE</a></tt><tt class="py-op">,</tt>  </tt>
<a name="L81"></a><tt class="py-lineno"> 81</tt>  <tt class="py-line">            <tt class="py-name">_</tt><tt class="py-op">(</tt><tt class="py-string">"Security event %(name)s received: %(message)s"</tt><tt class="py-op">)</tt> <tt class="py-op">%</tt> </tt>
<a name="L82"></a><tt class="py-lineno"> 82</tt>  <tt class="py-line">                <tt class="py-op">{</tt><tt class="py-string">'name'</tt> <tt class="py-op">:</tt> <tt class="py-name">event_name</tt><tt class="py-op">,</tt> </tt>
<a name="L83"></a><tt class="py-lineno"> 83</tt>  <tt class="py-line">                 <tt class="py-string">'message'</tt> <tt class="py-op">:</tt> <tt class="py-name">log_message</tt><tt class="py-op">,</tt><tt class="py-op">}</tt> <tt class="py-op">)</tt> </tt>
<a name="L84"></a><tt class="py-lineno"> 84</tt>  <tt class="py-line">                  </tt>
<a name="L85"></a><tt class="py-lineno"> 85</tt>  <tt class="py-line">        <tt class="py-comment"># Add the event to the current user, which may trigger a detector</tt> </tt>
<a name="L86"></a><tt class="py-lineno"> 86</tt>  <tt class="py-line">        <tt id="link-45" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-45', 'user', 'link-27');">user</a></tt> <tt class="py-op">=</tt> <tt id="link-46" class="py-name"><a title="esapi.core.ESAPI" class="py-name" href="#" onclick="return doclink('link-46', 'ESAPI', 'link-2');">ESAPI</a></tt><tt class="py-op">.</tt><tt id="link-47" class="py-name"><a title="esapi.authenticator
esapi.core.ESAPI.authenticator" class="py-name" href="#" onclick="return doclink('link-47', 'authenticator', 'link-29');">authenticator</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">.</tt><tt class="py-name">current_user</tt> </tt>
<a name="L87"></a><tt class="py-lineno"> 87</tt>  <tt class="py-line">         </tt>
<a name="L88"></a><tt class="py-lineno"> 88</tt>  <tt class="py-line">        <tt class="py-keyword">try</tt><tt class="py-op">:</tt> </tt>
<a name="L89"></a><tt class="py-lineno"> 89</tt>  <tt class="py-line">            <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-48" class="py-name"><a title="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.add_security_event" class="py-name" href="#" onclick="return doclink('link-48', 'add_security_event', 'link-30');">add_security_event</a></tt><tt class="py-op">(</tt><tt id="link-49" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-49', 'user', 'link-27');">user</a></tt><tt class="py-op">,</tt> <tt class="py-string">"event_"</tt> <tt class="py-op">+</tt> <tt class="py-name">event_name</tt><tt class="py-op">)</tt> </tt>
<a name="L90"></a><tt class="py-lineno"> 90</tt>  <tt class="py-line">        <tt class="py-keyword">except</tt> <tt id="link-50" class="py-name"><a title="esapi.exceptions.IntrusionException" class="py-name" href="#" onclick="return doclink('link-50', 'IntrusionException', 'link-13');">IntrusionException</a></tt><tt class="py-op">,</tt> <tt class="py-name">extra</tt><tt class="py-op">:</tt> </tt>
<a name="L91"></a><tt class="py-lineno"> 91</tt>  <tt class="py-line">            <tt class="py-name">quota</tt> <tt class="py-op">=</tt> <tt id="link-51" class="py-name"><a title="esapi.core.ESAPI" class="py-name" href="#" onclick="return doclink('link-51', 'ESAPI', 'link-2');">ESAPI</a></tt><tt class="py-op">.</tt><tt id="link-52" class="py-name"><a title="esapi.core.ESAPI.security_configuration
esapi.security_configuration" class="py-name" href="#" onclick="return doclink('link-52', 'security_configuration', 'link-34');">security_configuration</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">.</tt><tt id="link-53" class="py-name"><a title="esapi.reference.default_security_configuration.DefaultSecurityConfiguration.get_quota
esapi.security_configuration.SecurityConfiguration.get_quota" class="py-name" href="#" onclick="return doclink('link-53', 'get_quota', 'link-35');">get_quota</a></tt><tt class="py-op">(</tt><tt class="py-string">"event_"</tt> <tt class="py-op">+</tt> <tt class="py-name">event_name</tt><tt class="py-op">)</tt> </tt>
<a name="L92"></a><tt class="py-lineno"> 92</tt>  <tt class="py-line">            <tt class="py-keyword">for</tt> <tt class="py-name">action</tt> <tt class="py-keyword">in</tt> <tt class="py-name">quota</tt><tt class="py-op">.</tt><tt id="link-54" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.actions" class="py-name" href="#" onclick="return doclink('link-54', 'actions', 'link-36');">actions</a></tt><tt class="py-op">:</tt> </tt>
<a name="L93"></a><tt class="py-lineno"> 93</tt>  <tt class="py-line">                <tt class="py-name">message</tt> <tt class="py-op">=</tt> <tt class="py-op">(</tt><tt class="py-name">_</tt><tt class="py-op">(</tt><tt class="py-string">"User exceeded quota of %(count)s per %(interval)s seconds for event %(event_name)s. Taking actions %(actions)s"</tt><tt class="py-op">)</tt> <tt class="py-op">%</tt> </tt>
<a name="L94"></a><tt class="py-lineno"> 94</tt>  <tt class="py-line">                    <tt class="py-op">{</tt><tt class="py-string">'count'</tt> <tt class="py-op">:</tt> <tt class="py-name">quota</tt><tt class="py-op">.</tt><tt id="link-55" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.count
esapi.test.http.mock_session.MockSession.count" class="py-name" href="#" onclick="return doclink('link-55', 'count', 'link-37');">count</a></tt><tt class="py-op">,</tt> </tt>
<a name="L95"></a><tt class="py-lineno"> 95</tt>  <tt class="py-line">                     <tt class="py-string">'interval'</tt> <tt class="py-op">:</tt> <tt class="py-name">quota</tt><tt class="py-op">.</tt><tt id="link-56" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.interval" class="py-name" href="#" onclick="return doclink('link-56', 'interval', 'link-38');">interval</a></tt><tt class="py-op">,</tt> </tt>
<a name="L96"></a><tt class="py-lineno"> 96</tt>  <tt class="py-line">                     <tt class="py-string">'event_name'</tt> <tt class="py-op">:</tt> <tt class="py-name">event_name</tt><tt class="py-op">,</tt> </tt>
<a name="L97"></a><tt class="py-lineno"> 97</tt>  <tt class="py-line">                     <tt class="py-string">'actions'</tt> <tt class="py-op">:</tt> <tt class="py-name">quota</tt><tt class="py-op">.</tt><tt id="link-57" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.actions" class="py-name" href="#" onclick="return doclink('link-57', 'actions', 'link-36');">actions</a></tt><tt class="py-op">,</tt><tt class="py-op">}</tt><tt class="py-op">)</tt> </tt>
<a name="L98"></a><tt class="py-lineno"> 98</tt>  <tt class="py-line">                <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-58" class="py-name"><a title="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.take_security_action" class="py-name" href="#" onclick="return doclink('link-58', 'take_security_action', 'link-40');">take_security_action</a></tt><tt class="py-op">(</tt><tt class="py-name">action</tt><tt class="py-op">,</tt> <tt class="py-name">message</tt><tt class="py-op">)</tt> </tt>
</div><a name="L99"></a><tt class="py-lineno"> 99</tt>  <tt class="py-line">         </tt>
<a name="DefaultIntrusionDetector.take_security_action"></a><div id="DefaultIntrusionDetector.take_security_action-def"><a name="L100"></a><tt class="py-lineno">100</tt> <a class="py-toggle" href="#" id="DefaultIntrusionDetector.take_security_action-toggle" onclick="return toggle('DefaultIntrusionDetector.take_security_action');">-</a><tt class="py-line">    <tt class="py-keyword">def</tt> <a class="py-def-name" href="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector-class.html#take_security_action">take_security_action</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">action</tt><tt class="py-op">,</tt> <tt class="py-param">message</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
</div><div id="DefaultIntrusionDetector.take_security_action-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="DefaultIntrusionDetector.take_security_action-expanded"><a name="L101"></a><tt class="py-lineno">101</tt>  <tt class="py-line">        <tt class="py-docstring">"""</tt> </tt>
<a name="L102"></a><tt class="py-lineno">102</tt>  <tt class="py-line"><tt class="py-docstring">        Take a specified security action. In this implementation, acceptable</tt> </tt>
<a name="L103"></a><tt class="py-lineno">103</tt>  <tt class="py-line"><tt class="py-docstring">        actions are: log, disable, logout, and lock.</tt> </tt>
<a name="L104"></a><tt class="py-lineno">104</tt>  <tt class="py-line"><tt class="py-docstring">        </tt> </tt>
<a name="L105"></a><tt class="py-lineno">105</tt>  <tt class="py-line"><tt class="py-docstring">        @param action: the action to take. Ie "log", "disable", "logout"</tt> </tt>
<a name="L106"></a><tt class="py-lineno">106</tt>  <tt class="py-line"><tt class="py-docstring">        @param message: the message to log if the action is "log"</tt> </tt>
<a name="L107"></a><tt class="py-lineno">107</tt>  <tt class="py-line"><tt class="py-docstring">        """</tt> </tt>
<a name="L108"></a><tt class="py-lineno">108</tt>  <tt class="py-line">        <tt class="py-keyword">if</tt> <tt class="py-name">action</tt> <tt class="py-op">==</tt> <tt class="py-string">"log"</tt><tt class="py-op">:</tt> </tt>
<a name="L109"></a><tt class="py-lineno">109</tt>  <tt class="py-line">            <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-59" class="py-name"><a title="esapi.core.ESAPI.logger
esapi.logger" class="py-name" href="#" onclick="return doclink('link-59', 'logger', 'link-9');">logger</a></tt><tt class="py-op">.</tt><tt id="link-60" class="py-name" targets="Method esapi.logger.Logger.fatal()=esapi.logger.Logger-class.html#fatal,Method esapi.reference.python_log_factory.PythonLogFactory.PythonLogger.fatal()=esapi.reference.python_log_factory.PythonLogFactory.PythonLogger-class.html#fatal"><a title="esapi.logger.Logger.fatal
esapi.reference.python_log_factory.PythonLogFactory.PythonLogger.fatal" class="py-name" href="#" onclick="return doclink('link-60', 'fatal', 'link-60');">fatal</a></tt><tt class="py-op">(</tt> <tt id="link-61" class="py-name"><a title="esapi.logger.Logger" class="py-name" href="#" onclick="return doclink('link-61', 'Logger', 'link-10');">Logger</a></tt><tt class="py-op">.</tt><tt id="link-62" class="py-name"><a title="esapi.logger.Logger.SECURITY_FAILURE" class="py-name" href="#" onclick="return doclink('link-62', 'SECURITY_FAILURE', 'link-20');">SECURITY_FAILURE</a></tt><tt class="py-op">,</tt> </tt>
<a name="L110"></a><tt class="py-lineno">110</tt>  <tt class="py-line">                <tt class="py-name">_</tt><tt class="py-op">(</tt><tt class="py-string">"INTRUSION - "</tt><tt class="py-op">)</tt> <tt class="py-op">+</tt> <tt class="py-name">message</tt> <tt class="py-op">)</tt> </tt>
<a name="L111"></a><tt class="py-lineno">111</tt>  <tt class="py-line">                 </tt>
<a name="L112"></a><tt class="py-lineno">112</tt>  <tt class="py-line">        <tt id="link-63" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-63', 'user', 'link-27');">user</a></tt> <tt class="py-op">=</tt> <tt id="link-64" class="py-name"><a title="esapi.core.ESAPI" class="py-name" href="#" onclick="return doclink('link-64', 'ESAPI', 'link-2');">ESAPI</a></tt><tt class="py-op">.</tt><tt id="link-65" class="py-name"><a title="esapi.authenticator
esapi.core.ESAPI.authenticator" class="py-name" href="#" onclick="return doclink('link-65', 'authenticator', 'link-29');">authenticator</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">.</tt><tt class="py-name">current_user</tt> </tt>
<a name="L113"></a><tt class="py-lineno">113</tt>  <tt class="py-line">        <tt class="py-keyword">if</tt> <tt id="link-66" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-66', 'user', 'link-27');">user</a></tt><tt class="py-op">.</tt><tt id="link-67" class="py-name" targets="Method esapi.reference.default_user.DefaultUser.is_anonymous()=esapi.reference.default_user.DefaultUser-class.html#is_anonymous,Method esapi.user.AnonymousUser.is_anonymous()=esapi.user.AnonymousUser-class.html#is_anonymous,Method esapi.user.User.is_anonymous()=esapi.user.User-class.html#is_anonymous"><a title="esapi.reference.default_user.DefaultUser.is_anonymous
esapi.user.AnonymousUser.is_anonymous
esapi.user.User.is_anonymous" class="py-name" href="#" onclick="return doclink('link-67', 'is_anonymous', 'link-67');">is_anonymous</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
<a name="L114"></a><tt class="py-lineno">114</tt>  <tt class="py-line">            <tt class="py-keyword">return</tt> </tt>
<a name="L115"></a><tt class="py-lineno">115</tt>  <tt class="py-line">        <tt class="py-keyword">elif</tt> <tt class="py-name">action</tt> <tt class="py-op">==</tt> <tt class="py-string">"disable"</tt><tt class="py-op">:</tt> </tt>
<a name="L116"></a><tt class="py-lineno">116</tt>  <tt class="py-line">            <tt id="link-68" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-68', 'user', 'link-27');">user</a></tt><tt class="py-op">.</tt><tt id="link-69" class="py-name" targets="Method esapi.reference.default_user.DefaultUser.disable()=esapi.reference.default_user.DefaultUser-class.html#disable,Method esapi.user.AnonymousUser.disable()=esapi.user.AnonymousUser-class.html#disable,Method esapi.user.User.disable()=esapi.user.User-class.html#disable"><a title="esapi.reference.default_user.DefaultUser.disable
esapi.user.AnonymousUser.disable
esapi.user.User.disable" class="py-name" href="#" onclick="return doclink('link-69', 'disable', 'link-69');">disable</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt> </tt>
<a name="L117"></a><tt class="py-lineno">117</tt>  <tt class="py-line">        <tt class="py-keyword">elif</tt> <tt class="py-name">action</tt> <tt class="py-op">==</tt> <tt class="py-string">"logout"</tt><tt class="py-op">:</tt> </tt>
<a name="L118"></a><tt class="py-lineno">118</tt>  <tt class="py-line">            <tt id="link-70" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-70', 'user', 'link-27');">user</a></tt><tt class="py-op">.</tt><tt id="link-71" class="py-name" targets="Method esapi.authenticator.Authenticator.logout()=esapi.authenticator.Authenticator-class.html#logout,Method esapi.reference.default_user.DefaultUser.logout()=esapi.reference.default_user.DefaultUser-class.html#logout,Method esapi.reference.shelve_authenticator.ShelveAuthenticator.logout()=esapi.reference.shelve_authenticator.ShelveAuthenticator-class.html#logout,Method esapi.user.AnonymousUser.logout()=esapi.user.AnonymousUser-class.html#logout,Method esapi.user.User.logout()=esapi.user.User-class.html#logout"><a title="esapi.authenticator.Authenticator.logout
esapi.reference.default_user.DefaultUser.logout
esapi.reference.shelve_authenticator.ShelveAuthenticator.logout
esapi.user.AnonymousUser.logout
esapi.user.User.logout" class="py-name" href="#" onclick="return doclink('link-71', 'logout', 'link-71');">logout</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt> </tt>
<a name="L119"></a><tt class="py-lineno">119</tt>  <tt class="py-line">        <tt class="py-keyword">elif</tt> <tt class="py-name">action</tt> <tt class="py-op">==</tt> <tt class="py-string">"lock"</tt><tt class="py-op">:</tt> </tt>
<a name="L120"></a><tt class="py-lineno">120</tt>  <tt class="py-line">            <tt id="link-72" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-72', 'user', 'link-27');">user</a></tt><tt class="py-op">.</tt><tt id="link-73" class="py-name" targets="Method esapi.reference.default_user.DefaultUser.lock()=esapi.reference.default_user.DefaultUser-class.html#lock,Method esapi.user.AnonymousUser.lock()=esapi.user.AnonymousUser-class.html#lock,Method esapi.user.User.lock()=esapi.user.User-class.html#lock"><a title="esapi.reference.default_user.DefaultUser.lock
esapi.user.AnonymousUser.lock
esapi.user.User.lock" class="py-name" href="#" onclick="return doclink('link-73', 'lock', 'link-73');">lock</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt> </tt>
</div><a name="L121"></a><tt class="py-lineno">121</tt>  <tt class="py-line">         </tt>
<a name="DefaultIntrusionDetector.add_security_event"></a><div id="DefaultIntrusionDetector.add_security_event-def"><a name="L122"></a><tt class="py-lineno">122</tt> <a class="py-toggle" href="#" id="DefaultIntrusionDetector.add_security_event-toggle" onclick="return toggle('DefaultIntrusionDetector.add_security_event');">-</a><tt class="py-line">    <tt class="py-keyword">def</tt> <a class="py-def-name" href="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector-class.html#add_security_event">add_security_event</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">user</tt><tt class="py-op">,</tt> <tt class="py-param">event_name</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
</div><div id="DefaultIntrusionDetector.add_security_event-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="DefaultIntrusionDetector.add_security_event-expanded"><a name="L123"></a><tt class="py-lineno">123</tt>  <tt class="py-line">        <tt class="py-docstring">"""</tt> </tt>
<a name="L124"></a><tt class="py-lineno">124</tt>  <tt class="py-line"><tt class="py-docstring">        Adds a security event to the user. These events are used to check</tt> </tt>
<a name="L125"></a><tt class="py-lineno">125</tt>  <tt class="py-line"><tt class="py-docstring">        that the user has not reached the security thresholds set in the</tt> </tt>
<a name="L126"></a><tt class="py-lineno">126</tt>  <tt class="py-line"><tt class="py-docstring">        SecurityConfiguration.</tt> </tt>
<a name="L127"></a><tt class="py-lineno">127</tt>  <tt class="py-line"><tt class="py-docstring">        </tt> </tt>
<a name="L128"></a><tt class="py-lineno">128</tt>  <tt class="py-line"><tt class="py-docstring">        @param user: the user tha caused the event</tt> </tt>
<a name="L129"></a><tt class="py-lineno">129</tt>  <tt class="py-line"><tt class="py-docstring">        @param event_name: the name of the event that occurred.</tt> </tt>
<a name="L130"></a><tt class="py-lineno">130</tt>  <tt class="py-line"><tt class="py-docstring">        """</tt> </tt>
<a name="L131"></a><tt class="py-lineno">131</tt>  <tt class="py-line">        <tt class="py-keyword">if</tt> <tt id="link-74" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-74', 'user', 'link-27');">user</a></tt><tt class="py-op">.</tt><tt id="link-75" class="py-name"><a title="esapi.reference.default_user.DefaultUser.is_anonymous
esapi.user.AnonymousUser.is_anonymous
esapi.user.User.is_anonymous" class="py-name" href="#" onclick="return doclink('link-75', 'is_anonymous', 'link-67');">is_anonymous</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
<a name="L132"></a><tt class="py-lineno">132</tt>  <tt class="py-line">            <tt class="py-keyword">return</tt> </tt>
<a name="L133"></a><tt class="py-lineno">133</tt>  <tt class="py-line">             </tt>
<a name="L134"></a><tt class="py-lineno">134</tt>  <tt class="py-line">        <tt class="py-name">threshold</tt> <tt class="py-op">=</tt> <tt id="link-76" class="py-name"><a title="esapi.core.ESAPI" class="py-name" href="#" onclick="return doclink('link-76', 'ESAPI', 'link-2');">ESAPI</a></tt><tt class="py-op">.</tt><tt id="link-77" class="py-name"><a title="esapi.core.ESAPI.security_configuration
esapi.security_configuration" class="py-name" href="#" onclick="return doclink('link-77', 'security_configuration', 'link-34');">security_configuration</a></tt><tt class="py-op">(</tt><tt class="py-op">)</tt><tt class="py-op">.</tt><tt id="link-78" class="py-name"><a title="esapi.reference.default_security_configuration.DefaultSecurityConfiguration.get_quota
esapi.security_configuration.SecurityConfiguration.get_quota" class="py-name" href="#" onclick="return doclink('link-78', 'get_quota', 'link-35');">get_quota</a></tt><tt class="py-op">(</tt><tt class="py-name">event_name</tt><tt class="py-op">)</tt> </tt>
<a name="L135"></a><tt class="py-lineno">135</tt>  <tt class="py-line">        <tt class="py-keyword">if</tt> <tt class="py-name">threshold</tt> <tt class="py-keyword">is</tt> <tt class="py-keyword">not</tt> <tt class="py-name">None</tt><tt class="py-op">:</tt> </tt>
<a name="L136"></a><tt class="py-lineno">136</tt>  <tt class="py-line">            <tt class="py-name">event</tt> <tt class="py-op">=</tt> <tt id="link-79" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-79', 'user', 'link-27');">user</a></tt><tt class="py-op">.</tt><tt class="py-name">event_map</tt><tt class="py-op">.</tt><tt id="link-80" class="py-name" targets="Method esapi.ihttp.ISession.get()=esapi.ihttp.ISession-class.html#get,Method esapi.test.http.mock_session.MockSession.get()=esapi.test.http.mock_session.MockSession-class.html#get"><a title="esapi.ihttp.ISession.get
esapi.test.http.mock_session.MockSession.get" class="py-name" href="#" onclick="return doclink('link-80', 'get', 'link-80');">get</a></tt><tt class="py-op">(</tt><tt class="py-name">event_name</tt><tt class="py-op">)</tt> </tt>
<a name="L137"></a><tt class="py-lineno">137</tt>  <tt class="py-line">            <tt class="py-keyword">if</tt> <tt class="py-name">event</tt> <tt class="py-keyword">is</tt> <tt class="py-name">None</tt><tt class="py-op">:</tt> </tt>
<a name="L138"></a><tt class="py-lineno">138</tt>  <tt class="py-line">                <tt class="py-name">event</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt id="link-81" class="py-name" targets="Class esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.Event=esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.Event-class.html"><a title="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.Event" class="py-name" href="#" onclick="return doclink('link-81', 'Event', 'link-81');">Event</a></tt><tt class="py-op">(</tt><tt class="py-name">event_name</tt><tt class="py-op">)</tt> </tt>
<a name="L139"></a><tt class="py-lineno">139</tt>  <tt class="py-line">                <tt id="link-82" class="py-name"><a title="esapi.core.ESAPI.user
esapi.user" class="py-name" href="#" onclick="return doclink('link-82', 'user', 'link-27');">user</a></tt><tt class="py-op">.</tt><tt class="py-name">event_map</tt><tt class="py-op">[</tt><tt class="py-name">event_name</tt><tt class="py-op">]</tt> <tt class="py-op">=</tt> <tt class="py-name">event</tt> </tt>
<a name="L140"></a><tt class="py-lineno">140</tt>  <tt class="py-line">                 </tt>
<a name="L141"></a><tt class="py-lineno">141</tt>  <tt class="py-line">            <tt class="py-name">event</tt><tt class="py-op">.</tt><tt id="link-83" class="py-name" targets="Method esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.Event.increment()=esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.Event-class.html#increment"><a title="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.Event.increment" class="py-name" href="#" onclick="return doclink('link-83', 'increment', 'link-83');">increment</a></tt><tt class="py-op">(</tt><tt class="py-name">threshold</tt><tt class="py-op">.</tt><tt id="link-84" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.count
esapi.test.http.mock_session.MockSession.count" class="py-name" href="#" onclick="return doclink('link-84', 'count', 'link-37');">count</a></tt><tt class="py-op">,</tt> <tt class="py-name">threshold</tt><tt class="py-op">.</tt><tt id="link-85" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.interval" class="py-name" href="#" onclick="return doclink('link-85', 'interval', 'link-38');">interval</a></tt><tt class="py-op">)</tt> </tt>
</div><a name="L142"></a><tt class="py-lineno">142</tt>  <tt class="py-line">             </tt>
<a name="DefaultIntrusionDetector.Event"></a><div id="DefaultIntrusionDetector.Event-def"><a name="L143"></a><tt class="py-lineno">143</tt> <a class="py-toggle" href="#" id="DefaultIntrusionDetector.Event-toggle" onclick="return toggle('DefaultIntrusionDetector.Event');">-</a><tt class="py-line">    <tt class="py-keyword">class</tt> <a class="py-def-name" href="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.Event-class.html">Event</a><tt class="py-op">:</tt> </tt>
</div><div id="DefaultIntrusionDetector.Event-collapsed" style="display:none;" pad="+++" indent="++++++++"></div><div id="DefaultIntrusionDetector.Event-expanded"><a name="DefaultIntrusionDetector.Event.__init__"></a><div id="DefaultIntrusionDetector.Event.__init__-def"><a name="L144"></a><tt class="py-lineno">144</tt> <a class="py-toggle" href="#" id="DefaultIntrusionDetector.Event.__init__-toggle" onclick="return toggle('DefaultIntrusionDetector.Event.__init__');">-</a><tt class="py-line">        <tt class="py-keyword">def</tt> <a class="py-def-name" href="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.Event-class.html#__init__">__init__</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">key</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
</div><div id="DefaultIntrusionDetector.Event.__init__-collapsed" style="display:none;" pad="+++" indent="++++++++++++++++"></div><div id="DefaultIntrusionDetector.Event.__init__-expanded"><a name="L145"></a><tt class="py-lineno">145</tt>  <tt class="py-line">            <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">key</tt> <tt class="py-op">=</tt> <tt class="py-name">key</tt> </tt>
<a name="L146"></a><tt class="py-lineno">146</tt>  <tt class="py-line">            <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">times</tt> <tt class="py-op">=</tt> <tt class="py-op">[</tt><tt class="py-op">]</tt> </tt>
</div><a name="L147"></a><tt class="py-lineno">147</tt>  <tt class="py-line">             </tt>
<a name="DefaultIntrusionDetector.Event.increment"></a><div id="DefaultIntrusionDetector.Event.increment-def"><a name="L148"></a><tt class="py-lineno">148</tt> <a class="py-toggle" href="#" id="DefaultIntrusionDetector.Event.increment-toggle" onclick="return toggle('DefaultIntrusionDetector.Event.increment');">-</a><tt class="py-line">        <tt class="py-keyword">def</tt> <a class="py-def-name" href="esapi.reference.default_intrusion_detector.DefaultIntrusionDetector.Event-class.html#increment">increment</a><tt class="py-op">(</tt><tt class="py-param">self</tt><tt class="py-op">,</tt> <tt class="py-param">count</tt><tt class="py-op">,</tt> <tt class="py-param">interval</tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
</div><div id="DefaultIntrusionDetector.Event.increment-collapsed" style="display:none;" pad="+++" indent="++++++++++++++++"></div><div id="DefaultIntrusionDetector.Event.increment-expanded"><a name="L149"></a><tt class="py-lineno">149</tt>  <tt class="py-line">            <tt class="py-name">now</tt> <tt class="py-op">=</tt> <tt class="py-name">datetime</tt><tt class="py-op">.</tt><tt class="py-name">now</tt><tt class="py-op">(</tt><tt class="py-op">)</tt> </tt>
<a name="L150"></a><tt class="py-lineno">150</tt>  <tt class="py-line">            <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">times</tt><tt class="py-op">.</tt><tt class="py-name">append</tt><tt class="py-op">(</tt><tt class="py-name">now</tt><tt class="py-op">)</tt> </tt>
<a name="L151"></a><tt class="py-lineno">151</tt>  <tt class="py-line">            <tt class="py-keyword">if</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">times</tt><tt class="py-op">)</tt> <tt class="py-op">&gt;</tt> <tt id="link-86" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.count
esapi.test.http.mock_session.MockSession.count" class="py-name" href="#" onclick="return doclink('link-86', 'count', 'link-37');">count</a></tt><tt class="py-op">:</tt> </tt>
<a name="L152"></a><tt class="py-lineno">152</tt>  <tt class="py-line">                <tt class="py-name">num_to_remove</tt> <tt class="py-op">=</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">times</tt><tt class="py-op">)</tt> <tt class="py-op">-</tt> <tt id="link-87" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.count
esapi.test.http.mock_session.MockSession.count" class="py-name" href="#" onclick="return doclink('link-87', 'count', 'link-37');">count</a></tt> </tt>
<a name="L153"></a><tt class="py-lineno">153</tt>  <tt class="py-line">                <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">times</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">times</tt><tt class="py-op">[</tt><tt class="py-name">num_to_remove</tt><tt class="py-op">:</tt><tt class="py-op">]</tt> </tt>
<a name="L154"></a><tt class="py-lineno">154</tt>  <tt class="py-line">                 </tt>
<a name="L155"></a><tt class="py-lineno">155</tt>  <tt class="py-line">            <tt class="py-keyword">if</tt> <tt class="py-name">len</tt><tt class="py-op">(</tt><tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">times</tt><tt class="py-op">)</tt> <tt class="py-op">==</tt> <tt id="link-88" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.count
esapi.test.http.mock_session.MockSession.count" class="py-name" href="#" onclick="return doclink('link-88', 'count', 'link-37');">count</a></tt><tt class="py-op">:</tt> </tt>
<a name="L156"></a><tt class="py-lineno">156</tt>  <tt class="py-line">                <tt class="py-name">first_event_time</tt> <tt class="py-op">=</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">times</tt><tt class="py-op">[</tt><tt class="py-number">0</tt><tt class="py-op">]</tt> </tt>
<a name="L157"></a><tt class="py-lineno">157</tt>  <tt class="py-line">                <tt class="py-keyword">if</tt> <tt class="py-name">now</tt> <tt class="py-op">-</tt> <tt class="py-name">first_event_time</tt> <tt class="py-op">&lt;</tt> <tt class="py-name">timedelta</tt><tt class="py-op">(</tt><tt class="py-name">seconds</tt><tt class="py-op">=</tt><tt id="link-89" class="py-name"><a title="esapi.security_configuration.SecurityConfiguration.Threshold.interval" class="py-name" href="#" onclick="return doclink('link-89', 'interval', 'link-38');">interval</a></tt><tt class="py-op">)</tt><tt class="py-op">:</tt> </tt>
<a name="L158"></a><tt class="py-lineno">158</tt>  <tt class="py-line">                    <tt class="py-keyword">raise</tt> <tt id="link-90" class="py-name"><a title="esapi.exceptions.IntrusionException" class="py-name" href="#" onclick="return doclink('link-90', 'IntrusionException', 'link-13');">IntrusionException</a></tt><tt class="py-op">(</tt> </tt>
<a name="L159"></a><tt class="py-lineno">159</tt>  <tt class="py-line">                        <tt class="py-name">_</tt><tt class="py-op">(</tt><tt class="py-string">"Threshold exceeded"</tt><tt class="py-op">)</tt><tt class="py-op">,</tt> </tt>
<a name="L160"></a><tt class="py-lineno">160</tt>  <tt class="py-line">                        <tt class="py-name">_</tt><tt class="py-op">(</tt><tt class="py-string">"Exceeded threshold for %(key)s"</tt><tt class="py-op">)</tt> <tt class="py-op">%</tt> </tt>
<a name="L161"></a><tt class="py-lineno">161</tt>  <tt class="py-line">                        <tt class="py-op">{</tt><tt class="py-string">'key'</tt> <tt class="py-op">:</tt> <tt class="py-name">self</tt><tt class="py-op">.</tt><tt class="py-name">key</tt><tt class="py-op">}</tt> <tt class="py-op">)</tt> </tt>
</div></div></div><a name="L162"></a><tt class="py-lineno">162</tt>  <tt class="py-line"> </tt><script type="text/javascript">
<!--
expandto(location.href);
// -->
</script>
</pre>
<br />
<!-- ==================== NAVIGATION BAR ==================== -->
<table class="navbar" border="0" width="100%" cellpadding="0"
       bgcolor="#a0c0ff" cellspacing="0">
  <tr valign="middle">
  <!-- Home link -->
      <th>&nbsp;&nbsp;&nbsp;<a
        href="esapi-module.html">Home</a>&nbsp;&nbsp;&nbsp;</th>

  <!-- Tree link -->
      <th>&nbsp;&nbsp;&nbsp;<a
        href="module-tree.html">Trees</a>&nbsp;&nbsp;&nbsp;</th>

  <!-- Index link -->
      <th>&nbsp;&nbsp;&nbsp;<a
        href="identifier-index.html">Indices</a>&nbsp;&nbsp;&nbsp;</th>

  <!-- Help link -->
      <th>&nbsp;&nbsp;&nbsp;<a
        href="help.html">Help</a>&nbsp;&nbsp;&nbsp;</th>

      <th class="navbar" width="100%"></th>
  </tr>
</table>
<table border="0" cellpadding="0" cellspacing="0" width="100%%">
  <tr>
    <td align="left" class="footer">
    Generated by Epydoc 3.0.1 on Sun Nov  8 16:04:24 2009
    </td>
    <td align="right" class="footer">
      <a target="mainFrame" href="http://epydoc.sourceforge.net"
        >http://epydoc.sourceforge.net</a>
    </td>
  </tr>
</table>

<script type="text/javascript">
  <!--
  // Private objects are initially displayed (because if
  // javascript is turned off then we want them to be
  // visible); but by default, we want to hide them.  So hide
  // them unless we have a cookie that says to show them.
  checkCookie();
  // -->
</script>
</body>
</html>
